Free · GPLv2 · WordPress.org

sameAs Profile Manager

The only WordPress plugin that verifies your author and brand sameAs URLs before shipping them to Google. Two-minute setup. Zero telemetry. Built for founders who want the Knowledge Graph to actually connect.

Version 1.0.0 · Tested up to WordPress 7.0 · Requires WP 6.0+ · Requires PHP 7.4+

// wp_head output on your front page
<script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": "Person",
  "name": "Ali Yasin Jatoi",
  "url": "https://webcarestudios.com",
  "sameAs": [
    "https://www.linkedin.com/in/aliyasinjatoi/",
    "https://x.com/aliyasinjatoi",
    "https://github.com/aliyasinjatoi"
  ]
}
</script>

Every URL in the sameAs array was HTTP-verified before this schema was rendered.

What makes it different

Most schema plugins accept URL input and hope for the best. This one verifies, sanitises, and places the schema where it will not double up.

Live URL verifier

Every profile URL is fetched and colour coded. Green means resolves and matches. Yellow means redirects. Red means dead or mismatched. No dead sameAs shipped to Google.

SSRF safe by design

The verifier refuses private and loopback ranges (127.0.0.1, 10/8, 169.254.0.0/16, IPv6 local). A resolver-side allowlist blocks DNS rebinding. Reviewed against the OWASP SSRF cheat sheet.

Front-page-only placement

Schema prints only where it belongs (site front page, or the page you pick), never on every post. Prevents the duplicate-entity signal that gets sites flagged in Rich Results.

Zero database bloat

One options row. Uninstall removes it cleanly. Verified by Plugin Check on a fresh WordPress 7.0 install.

How it works

From download to a valid Rich Result in under five minutes.

  1. 1

    Install and activate

    Upload the ZIP from wordpress.org or install from Plugins → Add New. No account, no external service, no telemetry.

  2. 2

    Add your profile URLs

    Settings → sameAs Profiles. Paste your LinkedIn, X, GitHub, YouTube, Crunchbase, Wikidata, or any other authoritative profile. The plugin verifies each one live.

  3. 3

    Pick where it appears

    Choose front page (default) or select a specific page. Schema is injected as valid JSON-LD in the <head>.

  4. 4

    Verify with Google

    Paste your URL into Google's Rich Results Test. You should see a Person or Organization entity with a clean sameAs array. That is the signal Knowledge Graph reads.

Compatibility

WordPress

6.0 → 7.0

PHP

7.4+ (8.0 recommended)

Multisite

Supported

License

GPLv2 or later

Tested against the official Plugin Check tool on a fresh WordPress 7.0 install with PHP 8.3. Zero errors, zero warnings.

Frequently asked questions

What does the sameAs Profile Manager plugin do?

It adds a Person or Organization JSON-LD schema block to your WordPress front page with a verified sameAs array pointing at your authoritative profiles (LinkedIn, X, GitHub, YouTube, Wikidata, Crunchbase, and any custom URLs). This is the signal Google's Knowledge Graph uses to connect your website to your identity across the web.

Why do I need sameAs schema?

Google's Knowledge Graph and AI Overviews link entities (people, brands, organisations) to their web presence using the sameAs property. Without it, Google has to guess whether the John Smith on your site is the same John Smith on LinkedIn. With it, you tell Google explicitly, and you become eligible for author knowledge panels, brand SERP boxes, and AI-generated overviews.

How is this different from Yoast SEO or Rank Math?

Yoast and Rank Math generate schema too, but their sameAs handling is basic: they accept URLs, they do not verify them. If your LinkedIn URL 404s or your Twitter handle changed, Yoast still ships the dead URL in your schema. sameAs Profile Manager fetches every URL live, checks HTTP status, follows redirects safely, and flags mismatches before the schema ever renders. It is a specialist tool, not a replacement for a full SEO plugin.

Is it safe? What about SSRF?

Yes. The verifier is built with SSRF protection from the ground up: private and loopback IP ranges (127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16, IPv6 local) are refused before any HTTP request is made. Resolver-side checks prevent DNS rebinding. Every URL input is sanitised with esc_url_raw and validated against wp_kses. Reviewed against the OWASP SSRF cheat sheet before submission.

Does it work with Elementor, Divi, Astra, or my page builder?

Yes. The schema is injected in the wp_head hook, so it renders regardless of the page builder, theme, or block editor you use. Tested on WordPress 7.0 with Astra, GeneratePress, Twenty Twenty-Five, and the Divi and Elementor builders.

Will it slow my site down?

No. URL verification runs only when you click Verify inside Settings, not on every page load. The front-end footprint is one JSON-LD block (typically under 1 KB) added to the wp_head. There are no scripts, no external requests, no admin bar clutter.

What happens when I uninstall it?

The uninstall.php script removes the single options row the plugin created (wcsam_settings). No orphan tables, no leftover post meta. Verified by wp plugin uninstall on a clean WordPress 7.0 install.

Is it really free? What is the catch?

Yes, it is fully free under GPLv2, hosted on wordpress.org, no upsell inside the plugin. WebCare Studios maintains it as a free contribution to the WordPress ecosystem. If you also need someone to look after the WordPress site the schema lives on, that is our paid business — but the plugin itself is a gift.

Changelog

v1.0.0

Initial wordpress.org release. Person and Organization schema. Live URL verifier with SSRF protection. Front-page placement control. Clean uninstall.

Ship verified author schema in the next five minutes

Free, GPLv2, hosted on WordPress.org. Built and maintained by the fleet engineers at WebCare Studios.

Call Book a call